Privacy Policy

Information We Collect

We collect the following categories of information:

• Account information — name, email address, organization, and role
• Project documents — files you upload directly to a project
• Imported files — files you explicitly select and import from a connected Google Drive or Microsoft OneDrive account, described in detail below
• Usage data — how you interact with the Service, for reliability and support purposes

How We Use Your Information

We use collected information to provide and improve the Service: processing and indexing your project documents so our AI agents can answer questions, check compliance, and generate reports; authenticating your account; and providing customer support.

Third-Party Data Sharing

We share data with a limited set of subprocessors necessary to operate the Service, by category:

• Cloud hosting and storage providers, to run the Service and store Client Data
• AI / large language model providers, to power document Q&A, compliance checking, and report generation
• Error monitoring providers, to detect and diagnose technical issues
• Analytics and performance monitoring providers, to understand aggregate traffic and page-load performance

We do not sell Client Data or account information to third parties.

Google Drive & OneDrive Data Handling

If you choose to import files from Google Drive or OneDrive, the following applies specifically to that feature:

• You authenticate directly with Google or Microsoft in your browser. We never see or handle your Google or Microsoft account password.
• For Google Drive, we request Google's drive.file scope, which grants access only to the specific files you select using Google's own picker interface — we do not request or receive access to your entire Drive.
• For OneDrive, we request the read-only Files.Read scope, which lets you browse and select files inside Buildera's own file-selection screen (Microsoft does not currently offer an equivalent per-file picker widget). We only read the files you actually choose to import — we never modify, delete, or otherwise write to your OneDrive.
• The access token issued by Google or Microsoft is used only to fetch the files you selected for that import, and is discarded once the import completes. It is never stored on our servers, and is never logged or persisted in any database or backup.
• Once a file is imported, it is treated exactly like any other project document you upload directly, subject to the rest of this Privacy Policy.
• Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Files imported from Google Drive or OneDrive are used solely to provide the Service to your organization and are never used to train AI models that are shared or reused across other customers.

Data Retention

We retain Client Data for as long as your account or organization remains active, or as needed to provide the Service. You may request deletion of your data at any time, subject to any legal or contractual retention obligations.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

Data Security

We use industry-standard technical and organizational measures — including encryption in transit, role-based access control, and organization-level data isolation — to protect information from unauthorized access, disclosure, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Data may be processed and stored outside Saudi Arabia by the cloud hosting and infrastructure providers we use to run the Service. Where this occurs, we take contractual, technical, and organizational measures designed to protect your data in accordance with applicable law, including Saudi Arabia's Personal Data Protection Law (PDPL), when it is transferred, processed, or stored outside the Kingdom.

Children's Privacy

The Service is intended for business use by construction industry professionals and organizations. It is not directed at, and we do not knowingly collect information from, children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered organizations. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy, or requests to exercise your data rights, can be sent to privacy@buildera.ai.